You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
951 lines
30 KiB
951 lines
30 KiB
/* |
|
* Copyright (C) 2008 The Android Open Source Project |
|
* |
|
* Licensed under the Apache License, Version 2.0 (the "License"); |
|
* you may not use this file except in compliance with the License. |
|
* You may obtain a copy of the License at |
|
* |
|
* http://www.apache.org/licenses/LICENSE-2.0 |
|
* |
|
* Unless required by applicable law or agreed to in writing, software |
|
* distributed under the License is distributed on an "AS IS" BASIS, |
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|
* See the License for the specific language governing permissions and |
|
* limitations under the License. |
|
*/ |
|
|
|
#include "builtins.h" |
|
|
|
#include <dirent.h> |
|
#include <errno.h> |
|
#include <fcntl.h> |
|
#include <linux/loop.h> |
|
#include <linux/module.h> |
|
#include <mntent.h> |
|
#include <net/if.h> |
|
#include <sched.h> |
|
#include <signal.h> |
|
#include <stdio.h> |
|
#include <stdlib.h> |
|
#include <string.h> |
|
#include <sys/mount.h> |
|
#include <sys/resource.h> |
|
#include <sys/socket.h> |
|
#include <sys/stat.h> |
|
#include <sys/syscall.h> |
|
#include <sys/system_properties.h> |
|
#include <sys/time.h> |
|
#include <sys/types.h> |
|
#include <sys/wait.h> |
|
#include <unistd.h> |
|
|
|
#include <android-base/chrono_utils.h> |
|
#include <android-base/file.h> |
|
#include <android-base/logging.h> |
|
#include <android-base/parseint.h> |
|
#include <android-base/properties.h> |
|
#include <android-base/strings.h> |
|
#include <bootloader_message/bootloader_message.h> |
|
#include <cutils/android_reboot.h> |
|
#include <ext4_utils/ext4_crypt.h> |
|
#include <ext4_utils/ext4_crypt_init_extensions.h> |
|
#include <fs_mgr.h> |
|
#include <selinux/android.h> |
|
#include <selinux/label.h> |
|
#include <selinux/selinux.h> |
|
|
|
#include "action.h" |
|
#include "bootchart.h" |
|
#include "init.h" |
|
#include "init_parser.h" |
|
#include "property_service.h" |
|
#include "reboot.h" |
|
#include "service.h" |
|
#include "signal_handler.h" |
|
#include "util.h" |
|
|
|
using namespace std::literals::string_literals; |
|
|
|
#define chmod DO_NOT_USE_CHMOD_USE_FCHMODAT_SYMLINK_NOFOLLOW |
|
|
|
namespace android { |
|
namespace init { |
|
|
|
static constexpr std::chrono::nanoseconds kCommandRetryTimeout = 5s; |
|
|
|
static int insmod(const char *filename, const char *options, int flags) { |
|
int fd = open(filename, O_RDONLY | O_NOFOLLOW | O_CLOEXEC); |
|
if (fd == -1) { |
|
PLOG(ERROR) << "insmod: open(\"" << filename << "\") failed"; |
|
return -1; |
|
} |
|
int rc = syscall(__NR_finit_module, fd, options, flags); |
|
if (rc == -1) { |
|
PLOG(ERROR) << "finit_module for \"" << filename << "\" failed"; |
|
} |
|
close(fd); |
|
return rc; |
|
} |
|
|
|
static int __ifupdown(const char *interface, int up) { |
|
struct ifreq ifr; |
|
int s, ret; |
|
|
|
strlcpy(ifr.ifr_name, interface, IFNAMSIZ); |
|
|
|
s = socket(AF_INET, SOCK_DGRAM, 0); |
|
if (s < 0) |
|
return -1; |
|
|
|
ret = ioctl(s, SIOCGIFFLAGS, &ifr); |
|
if (ret < 0) { |
|
goto done; |
|
} |
|
|
|
if (up) |
|
ifr.ifr_flags |= IFF_UP; |
|
else |
|
ifr.ifr_flags &= ~IFF_UP; |
|
|
|
ret = ioctl(s, SIOCSIFFLAGS, &ifr); |
|
|
|
done: |
|
close(s); |
|
return ret; |
|
} |
|
|
|
static int reboot_into_recovery(const std::vector<std::string>& options) { |
|
std::string err; |
|
if (!write_bootloader_message(options, &err)) { |
|
LOG(ERROR) << "failed to set bootloader message: " << err; |
|
return -1; |
|
} |
|
property_set("sys.powerctl", "reboot,recovery"); |
|
return 0; |
|
} |
|
|
|
static int do_class_start(const std::vector<std::string>& args) { |
|
/* Starting a class does not start services |
|
* which are explicitly disabled. They must |
|
* be started individually. |
|
*/ |
|
ServiceManager::GetInstance(). |
|
ForEachServiceInClass(args[1], [] (Service* s) { s->StartIfNotDisabled(); }); |
|
return 0; |
|
} |
|
|
|
static int do_class_stop(const std::vector<std::string>& args) { |
|
ServiceManager::GetInstance(). |
|
ForEachServiceInClass(args[1], [] (Service* s) { s->Stop(); }); |
|
return 0; |
|
} |
|
|
|
static int do_class_reset(const std::vector<std::string>& args) { |
|
ServiceManager::GetInstance(). |
|
ForEachServiceInClass(args[1], [] (Service* s) { s->Reset(); }); |
|
return 0; |
|
} |
|
|
|
static int do_class_restart(const std::vector<std::string>& args) { |
|
ServiceManager::GetInstance(). |
|
ForEachServiceInClass(args[1], [] (Service* s) { s->Restart(); }); |
|
return 0; |
|
} |
|
|
|
static int do_domainname(const std::vector<std::string>& args) { |
|
std::string err; |
|
if (!WriteFile("/proc/sys/kernel/domainname", args[1], &err)) { |
|
LOG(ERROR) << err; |
|
return -1; |
|
} |
|
return 0; |
|
} |
|
|
|
static int do_enable(const std::vector<std::string>& args) { |
|
Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
|
if (!svc) { |
|
return -1; |
|
} |
|
return svc->Enable(); |
|
} |
|
|
|
static int do_exec(const std::vector<std::string>& args) { |
|
return ServiceManager::GetInstance().Exec(args) ? 0 : -1; |
|
} |
|
|
|
static int do_exec_start(const std::vector<std::string>& args) { |
|
return ServiceManager::GetInstance().ExecStart(args[1]) ? 0 : -1; |
|
} |
|
|
|
static int do_export(const std::vector<std::string>& args) { |
|
return add_environment(args[1].c_str(), args[2].c_str()); |
|
} |
|
|
|
static int do_hostname(const std::vector<std::string>& args) { |
|
std::string err; |
|
if (!WriteFile("/proc/sys/kernel/hostname", args[1], &err)) { |
|
LOG(ERROR) << err; |
|
return -1; |
|
} |
|
return 0; |
|
} |
|
|
|
static int do_ifup(const std::vector<std::string>& args) { |
|
return __ifupdown(args[1].c_str(), 1); |
|
} |
|
|
|
static int do_insmod(const std::vector<std::string>& args) { |
|
int flags = 0; |
|
auto it = args.begin() + 1; |
|
|
|
if (!(*it).compare("-f")) { |
|
flags = MODULE_INIT_IGNORE_VERMAGIC | MODULE_INIT_IGNORE_MODVERSIONS; |
|
it++; |
|
} |
|
|
|
std::string filename = *it++; |
|
std::string options = android::base::Join(std::vector<std::string>(it, args.end()), ' '); |
|
return insmod(filename.c_str(), options.c_str(), flags); |
|
} |
|
|
|
static int do_mkdir(const std::vector<std::string>& args) { |
|
mode_t mode = 0755; |
|
int ret; |
|
|
|
/* mkdir <path> [mode] [owner] [group] */ |
|
|
|
if (args.size() >= 3) { |
|
mode = std::strtoul(args[2].c_str(), 0, 8); |
|
} |
|
|
|
ret = make_dir(args[1].c_str(), mode, sehandle); |
|
/* chmod in case the directory already exists */ |
|
if (ret == -1 && errno == EEXIST) { |
|
ret = fchmodat(AT_FDCWD, args[1].c_str(), mode, AT_SYMLINK_NOFOLLOW); |
|
} |
|
if (ret == -1) { |
|
return -errno; |
|
} |
|
|
|
if (args.size() >= 4) { |
|
uid_t uid; |
|
std::string decode_uid_err; |
|
if (!DecodeUid(args[3], &uid, &decode_uid_err)) { |
|
LOG(ERROR) << "Unable to find UID for '" << args[3] << "': " << decode_uid_err; |
|
return -1; |
|
} |
|
gid_t gid = -1; |
|
|
|
if (args.size() == 5) { |
|
if (!DecodeUid(args[4], &gid, &decode_uid_err)) { |
|
LOG(ERROR) << "Unable to find GID for '" << args[3] << "': " << decode_uid_err; |
|
return -1; |
|
} |
|
} |
|
|
|
if (lchown(args[1].c_str(), uid, gid) == -1) { |
|
return -errno; |
|
} |
|
|
|
/* chown may have cleared S_ISUID and S_ISGID, chmod again */ |
|
if (mode & (S_ISUID | S_ISGID)) { |
|
ret = fchmodat(AT_FDCWD, args[1].c_str(), mode, AT_SYMLINK_NOFOLLOW); |
|
if (ret == -1) { |
|
return -errno; |
|
} |
|
} |
|
} |
|
|
|
if (e4crypt_is_native()) { |
|
if (e4crypt_set_directory_policy(args[1].c_str())) { |
|
const std::vector<std::string> options = { |
|
"--prompt_and_wipe_data", |
|
"--reason=set_policy_failed:"s + args[1]}; |
|
reboot_into_recovery(options); |
|
return 0; |
|
} |
|
} |
|
return 0; |
|
} |
|
|
|
/* umount <path> */ |
|
static int do_umount(const std::vector<std::string>& args) { |
|
return umount(args[1].c_str()); |
|
} |
|
|
|
static struct { |
|
const char *name; |
|
unsigned flag; |
|
} mount_flags[] = { |
|
{ "noatime", MS_NOATIME }, |
|
{ "noexec", MS_NOEXEC }, |
|
{ "nosuid", MS_NOSUID }, |
|
{ "nodev", MS_NODEV }, |
|
{ "nodiratime", MS_NODIRATIME }, |
|
{ "ro", MS_RDONLY }, |
|
{ "rw", 0 }, |
|
{ "remount", MS_REMOUNT }, |
|
{ "bind", MS_BIND }, |
|
{ "rec", MS_REC }, |
|
{ "unbindable", MS_UNBINDABLE }, |
|
{ "private", MS_PRIVATE }, |
|
{ "slave", MS_SLAVE }, |
|
{ "shared", MS_SHARED }, |
|
{ "defaults", 0 }, |
|
{ 0, 0 }, |
|
}; |
|
|
|
#define DATA_MNT_POINT "/data" |
|
|
|
/* mount <type> <device> <path> <flags ...> <options> */ |
|
static int do_mount(const std::vector<std::string>& args) { |
|
char tmp[64]; |
|
const char *source, *target, *system; |
|
const char *options = NULL; |
|
unsigned flags = 0; |
|
std::size_t na = 0; |
|
int n, i; |
|
int wait = 0; |
|
|
|
for (na = 4; na < args.size(); na++) { |
|
for (i = 0; mount_flags[i].name; i++) { |
|
if (!args[na].compare(mount_flags[i].name)) { |
|
flags |= mount_flags[i].flag; |
|
break; |
|
} |
|
} |
|
|
|
if (!mount_flags[i].name) { |
|
if (!args[na].compare("wait")) |
|
wait = 1; |
|
/* if our last argument isn't a flag, wolf it up as an option string */ |
|
else if (na + 1 == args.size()) |
|
options = args[na].c_str(); |
|
} |
|
} |
|
|
|
system = args[1].c_str(); |
|
source = args[2].c_str(); |
|
target = args[3].c_str(); |
|
|
|
if (!strncmp(source, "loop@", 5)) { |
|
int mode, loop, fd; |
|
struct loop_info info; |
|
|
|
mode = (flags & MS_RDONLY) ? O_RDONLY : O_RDWR; |
|
fd = open(source + 5, mode | O_CLOEXEC); |
|
if (fd < 0) { |
|
return -1; |
|
} |
|
|
|
for (n = 0; ; n++) { |
|
snprintf(tmp, sizeof(tmp), "/dev/block/loop%d", n); |
|
loop = open(tmp, mode | O_CLOEXEC); |
|
if (loop < 0) { |
|
close(fd); |
|
return -1; |
|
} |
|
|
|
/* if it is a blank loop device */ |
|
if (ioctl(loop, LOOP_GET_STATUS, &info) < 0 && errno == ENXIO) { |
|
/* if it becomes our loop device */ |
|
if (ioctl(loop, LOOP_SET_FD, fd) >= 0) { |
|
close(fd); |
|
|
|
if (mount(tmp, target, system, flags, options) < 0) { |
|
ioctl(loop, LOOP_CLR_FD, 0); |
|
close(loop); |
|
return -1; |
|
} |
|
|
|
close(loop); |
|
goto exit_success; |
|
} |
|
} |
|
|
|
close(loop); |
|
} |
|
|
|
close(fd); |
|
LOG(ERROR) << "out of loopback devices"; |
|
return -1; |
|
} else { |
|
if (wait) |
|
wait_for_file(source, kCommandRetryTimeout); |
|
if (mount(source, target, system, flags, options) < 0) { |
|
return -1; |
|
} |
|
|
|
} |
|
|
|
exit_success: |
|
return 0; |
|
|
|
} |
|
|
|
/* Imports .rc files from the specified paths. Default ones are applied if none is given. |
|
* |
|
* start_index: index of the first path in the args list |
|
*/ |
|
static void import_late(const std::vector<std::string>& args, size_t start_index, size_t end_index) { |
|
Parser& parser = Parser::GetInstance(); |
|
if (end_index <= start_index) { |
|
// Fallbacks for partitions on which early mount isn't enabled. |
|
if (!parser.is_system_etc_init_loaded()) { |
|
parser.ParseConfig("/system/etc/init"); |
|
parser.set_is_system_etc_init_loaded(true); |
|
} |
|
if (!parser.is_vendor_etc_init_loaded()) { |
|
parser.ParseConfig("/vendor/etc/init"); |
|
parser.set_is_vendor_etc_init_loaded(true); |
|
} |
|
if (!parser.is_odm_etc_init_loaded()) { |
|
parser.ParseConfig("/odm/etc/init"); |
|
parser.set_is_odm_etc_init_loaded(true); |
|
} |
|
} else { |
|
for (size_t i = start_index; i < end_index; ++i) { |
|
parser.ParseConfig(args[i]); |
|
} |
|
} |
|
|
|
// Turning this on and letting the INFO logging be discarded adds 0.2s to |
|
// Nexus 9 boot time, so it's disabled by default. |
|
if (false) DumpState(); |
|
} |
|
|
|
/* mount_fstab |
|
* |
|
* Call fs_mgr_mount_all() to mount the given fstab |
|
*/ |
|
static int mount_fstab(const char* fstabfile, int mount_mode) { |
|
int ret = -1; |
|
|
|
/* |
|
* Call fs_mgr_mount_all() to mount all filesystems. We fork(2) and |
|
* do the call in the child to provide protection to the main init |
|
* process if anything goes wrong (crash or memory leak), and wait for |
|
* the child to finish in the parent. |
|
*/ |
|
pid_t pid = fork(); |
|
if (pid > 0) { |
|
/* Parent. Wait for the child to return */ |
|
int status; |
|
int wp_ret = TEMP_FAILURE_RETRY(waitpid(pid, &status, 0)); |
|
if (wp_ret == -1) { |
|
// Unexpected error code. We will continue anyway. |
|
PLOG(WARNING) << "waitpid failed"; |
|
} |
|
|
|
if (WIFEXITED(status)) { |
|
ret = WEXITSTATUS(status); |
|
} else { |
|
ret = -1; |
|
} |
|
} else if (pid == 0) { |
|
/* child, call fs_mgr_mount_all() */ |
|
|
|
// So we can always see what fs_mgr_mount_all() does. |
|
// Only needed if someone explicitly changes the default log level in their init.rc. |
|
android::base::ScopedLogSeverity info(android::base::INFO); |
|
|
|
struct fstab* fstab = fs_mgr_read_fstab(fstabfile); |
|
int child_ret = fs_mgr_mount_all(fstab, mount_mode); |
|
fs_mgr_free_fstab(fstab); |
|
if (child_ret == -1) { |
|
PLOG(ERROR) << "fs_mgr_mount_all returned an error"; |
|
} |
|
_exit(child_ret); |
|
} else { |
|
/* fork failed, return an error */ |
|
return -1; |
|
} |
|
return ret; |
|
} |
|
|
|
/* Queue event based on fs_mgr return code. |
|
* |
|
* code: return code of fs_mgr_mount_all |
|
* |
|
* This function might request a reboot, in which case it will |
|
* not return. |
|
* |
|
* return code is processed based on input code |
|
*/ |
|
static int queue_fs_event(int code) { |
|
int ret = code; |
|
if (code == FS_MGR_MNTALL_DEV_NEEDS_ENCRYPTION) { |
|
ActionManager::GetInstance().QueueEventTrigger("encrypt"); |
|
} else if (code == FS_MGR_MNTALL_DEV_MIGHT_BE_ENCRYPTED) { |
|
property_set("ro.crypto.state", "encrypted"); |
|
property_set("ro.crypto.type", "block"); |
|
ActionManager::GetInstance().QueueEventTrigger("defaultcrypto"); |
|
} else if (code == FS_MGR_MNTALL_DEV_NOT_ENCRYPTED) { |
|
property_set("ro.crypto.state", "unencrypted"); |
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); |
|
} else if (code == FS_MGR_MNTALL_DEV_NOT_ENCRYPTABLE) { |
|
property_set("ro.crypto.state", "unsupported"); |
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); |
|
} else if (code == FS_MGR_MNTALL_DEV_NEEDS_RECOVERY) { |
|
/* Setup a wipe via recovery, and reboot into recovery */ |
|
PLOG(ERROR) << "fs_mgr_mount_all suggested recovery, so wiping data via recovery."; |
|
const std::vector<std::string> options = {"--wipe_data", "--reason=fs_mgr_mount_all" }; |
|
reboot_into_recovery(options); |
|
return 0; |
|
/* If reboot worked, there is no return. */ |
|
} else if (code == FS_MGR_MNTALL_DEV_FILE_ENCRYPTED) { |
|
if (e4crypt_install_keyring()) { |
|
return -1; |
|
} |
|
property_set("ro.crypto.state", "encrypted"); |
|
property_set("ro.crypto.type", "file"); |
|
|
|
// Although encrypted, we have device key, so we do not need to |
|
// do anything different from the nonencrypted case. |
|
ActionManager::GetInstance().QueueEventTrigger("nonencrypted"); |
|
} else if (code == FS_MGR_MNTALL_DEV_IS_METADATA_ENCRYPTED) { |
|
if (e4crypt_install_keyring()) { |
|
return -1; |
|
} |
|
property_set("ro.crypto.state", "encrypted"); |
|
property_set("ro.crypto.type", "file"); |
|
|
|
// defaultcrypto detects file/block encryption. init flow is same for each. |
|
ActionManager::GetInstance().QueueEventTrigger("defaultcrypto"); |
|
} else if (code == FS_MGR_MNTALL_DEV_NEEDS_METADATA_ENCRYPTION) { |
|
if (e4crypt_install_keyring()) { |
|
return -1; |
|
} |
|
property_set("ro.crypto.type", "file"); |
|
|
|
// encrypt detects file/block encryption. init flow is same for each. |
|
ActionManager::GetInstance().QueueEventTrigger("encrypt"); |
|
} else if (code > 0) { |
|
PLOG(ERROR) << "fs_mgr_mount_all returned unexpected error " << code; |
|
} |
|
/* else ... < 0: error */ |
|
|
|
return ret; |
|
} |
|
|
|
/* mount_all <fstab> [ <path> ]* [--<options>]* |
|
* |
|
* This function might request a reboot, in which case it will |
|
* not return. |
|
*/ |
|
static int do_mount_all(const std::vector<std::string>& args) { |
|
std::size_t na = 0; |
|
bool import_rc = true; |
|
bool queue_event = true; |
|
int mount_mode = MOUNT_MODE_DEFAULT; |
|
const char* fstabfile = args[1].c_str(); |
|
std::size_t path_arg_end = args.size(); |
|
const char* prop_post_fix = "default"; |
|
|
|
for (na = args.size() - 1; na > 1; --na) { |
|
if (args[na] == "--early") { |
|
path_arg_end = na; |
|
queue_event = false; |
|
mount_mode = MOUNT_MODE_EARLY; |
|
prop_post_fix = "early"; |
|
} else if (args[na] == "--late") { |
|
path_arg_end = na; |
|
import_rc = false; |
|
mount_mode = MOUNT_MODE_LATE; |
|
prop_post_fix = "late"; |
|
} |
|
} |
|
|
|
std::string prop_name = "ro.boottime.init.mount_all."s + prop_post_fix; |
|
android::base::Timer t; |
|
int ret = mount_fstab(fstabfile, mount_mode); |
|
property_set(prop_name, std::to_string(t.duration().count())); |
|
|
|
if (import_rc) { |
|
/* Paths of .rc files are specified at the 2nd argument and beyond */ |
|
import_late(args, 2, path_arg_end); |
|
} |
|
|
|
if (queue_event) { |
|
/* queue_fs_event will queue event based on mount_fstab return code |
|
* and return processed return code*/ |
|
ret = queue_fs_event(ret); |
|
} |
|
|
|
return ret; |
|
} |
|
|
|
static int do_swapon_all(const std::vector<std::string>& args) { |
|
struct fstab *fstab; |
|
int ret; |
|
|
|
fstab = fs_mgr_read_fstab(args[1].c_str()); |
|
ret = fs_mgr_swapon_all(fstab); |
|
fs_mgr_free_fstab(fstab); |
|
|
|
return ret; |
|
} |
|
|
|
static int do_setprop(const std::vector<std::string>& args) { |
|
property_set(args[1], args[2]); |
|
return 0; |
|
} |
|
|
|
static int do_setrlimit(const std::vector<std::string>& args) { |
|
struct rlimit limit; |
|
int resource; |
|
if (android::base::ParseInt(args[1], &resource) && |
|
android::base::ParseUint(args[2], &limit.rlim_cur) && |
|
android::base::ParseUint(args[3], &limit.rlim_max)) { |
|
return setrlimit(resource, &limit); |
|
} |
|
LOG(WARNING) << "ignoring setrlimit " << args[1] << " " << args[2] << " " << args[3]; |
|
return -1; |
|
} |
|
|
|
static int do_start(const std::vector<std::string>& args) { |
|
Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
|
if (!svc) { |
|
LOG(ERROR) << "do_start: Service " << args[1] << " not found"; |
|
return -1; |
|
} |
|
if (!svc->Start()) |
|
return -1; |
|
return 0; |
|
} |
|
|
|
static int do_stop(const std::vector<std::string>& args) { |
|
Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
|
if (!svc) { |
|
LOG(ERROR) << "do_stop: Service " << args[1] << " not found"; |
|
return -1; |
|
} |
|
svc->Stop(); |
|
return 0; |
|
} |
|
|
|
static int do_restart(const std::vector<std::string>& args) { |
|
Service* svc = ServiceManager::GetInstance().FindServiceByName(args[1]); |
|
if (!svc) { |
|
LOG(ERROR) << "do_restart: Service " << args[1] << " not found"; |
|
return -1; |
|
} |
|
svc->Restart(); |
|
return 0; |
|
} |
|
|
|
static int do_trigger(const std::vector<std::string>& args) { |
|
ActionManager::GetInstance().QueueEventTrigger(args[1]); |
|
return 0; |
|
} |
|
|
|
static int do_symlink(const std::vector<std::string>& args) { |
|
return symlink(args[1].c_str(), args[2].c_str()); |
|
} |
|
|
|
static int do_rm(const std::vector<std::string>& args) { |
|
return unlink(args[1].c_str()); |
|
} |
|
|
|
static int do_rmdir(const std::vector<std::string>& args) { |
|
return rmdir(args[1].c_str()); |
|
} |
|
|
|
static int do_sysclktz(const std::vector<std::string>& args) { |
|
struct timezone tz = {}; |
|
if (android::base::ParseInt(args[1], &tz.tz_minuteswest) && settimeofday(NULL, &tz) != -1) { |
|
return 0; |
|
} |
|
return -1; |
|
} |
|
|
|
static int do_verity_load_state(const std::vector<std::string>& args) { |
|
int mode = -1; |
|
bool loaded = fs_mgr_load_verity_state(&mode); |
|
if (loaded && mode != VERITY_MODE_DEFAULT) { |
|
ActionManager::GetInstance().QueueEventTrigger("verity-logging"); |
|
} |
|
return loaded ? 0 : 1; |
|
} |
|
|
|
static void verity_update_property(fstab_rec *fstab, const char *mount_point, |
|
int mode, int status) { |
|
property_set("partition."s + mount_point + ".verified", std::to_string(mode)); |
|
} |
|
|
|
static int do_verity_update_state(const std::vector<std::string>& args) { |
|
return fs_mgr_update_verity_state(verity_update_property) ? 0 : 1; |
|
} |
|
|
|
static int do_write(const std::vector<std::string>& args) { |
|
std::string err; |
|
if (!WriteFile(args[1], args[2], &err)) { |
|
LOG(ERROR) << err; |
|
return -1; |
|
} |
|
return 0; |
|
} |
|
|
|
static int do_copy(const std::vector<std::string>& args) { |
|
std::string data; |
|
std::string err; |
|
if (!ReadFile(args[1], &data, &err)) { |
|
LOG(ERROR) << err; |
|
return -1; |
|
} |
|
if (!WriteFile(args[2], data, &err)) { |
|
LOG(ERROR) << err; |
|
return -1; |
|
} |
|
return 0; |
|
} |
|
|
|
static int do_chown(const std::vector<std::string>& args) { |
|
uid_t uid; |
|
std::string decode_uid_err; |
|
if (!DecodeUid(args[1], &uid, &decode_uid_err)) { |
|
LOG(ERROR) << "Unable to find UID for '" << args[1] << "': " << decode_uid_err; |
|
return -1; |
|
} |
|
|
|
// GID is optional and pushes the index of path out by one if specified. |
|
const std::string& path = (args.size() == 4) ? args[3] : args[2]; |
|
gid_t gid = -1; |
|
|
|
if (args.size() == 4) { |
|
if (!DecodeUid(args[2], &gid, &decode_uid_err)) { |
|
LOG(ERROR) << "Unable to find GID for '" << args[2] << "': " << decode_uid_err; |
|
return -1; |
|
} |
|
} |
|
|
|
if (lchown(path.c_str(), uid, gid) == -1) return -errno; |
|
|
|
return 0; |
|
} |
|
|
|
static mode_t get_mode(const char *s) { |
|
mode_t mode = 0; |
|
while (*s) { |
|
if (*s >= '0' && *s <= '7') { |
|
mode = (mode<<3) | (*s-'0'); |
|
} else { |
|
return -1; |
|
} |
|
s++; |
|
} |
|
return mode; |
|
} |
|
|
|
static int do_chmod(const std::vector<std::string>& args) { |
|
mode_t mode = get_mode(args[1].c_str()); |
|
if (fchmodat(AT_FDCWD, args[2].c_str(), mode, AT_SYMLINK_NOFOLLOW) < 0) { |
|
return -errno; |
|
} |
|
return 0; |
|
} |
|
|
|
static int do_restorecon(const std::vector<std::string>& args) { |
|
int ret = 0; |
|
|
|
struct flag_type {const char* name; int value;}; |
|
static const flag_type flags[] = { |
|
{"--recursive", SELINUX_ANDROID_RESTORECON_RECURSE}, |
|
{"--skip-ce", SELINUX_ANDROID_RESTORECON_SKIPCE}, |
|
{"--cross-filesystems", SELINUX_ANDROID_RESTORECON_CROSS_FILESYSTEMS}, |
|
{0, 0} |
|
}; |
|
|
|
int flag = 0; |
|
|
|
bool in_flags = true; |
|
for (size_t i = 1; i < args.size(); ++i) { |
|
if (android::base::StartsWith(args[i], "--")) { |
|
if (!in_flags) { |
|
LOG(ERROR) << "restorecon - flags must precede paths"; |
|
return -1; |
|
} |
|
bool found = false; |
|
for (size_t j = 0; flags[j].name; ++j) { |
|
if (args[i] == flags[j].name) { |
|
flag |= flags[j].value; |
|
found = true; |
|
break; |
|
} |
|
} |
|
if (!found) { |
|
LOG(ERROR) << "restorecon - bad flag " << args[i]; |
|
return -1; |
|
} |
|
} else { |
|
in_flags = false; |
|
if (selinux_android_restorecon(args[i].c_str(), flag) < 0) { |
|
ret = -errno; |
|
} |
|
} |
|
} |
|
return ret; |
|
} |
|
|
|
static int do_restorecon_recursive(const std::vector<std::string>& args) { |
|
std::vector<std::string> non_const_args(args); |
|
non_const_args.insert(std::next(non_const_args.begin()), "--recursive"); |
|
return do_restorecon(non_const_args); |
|
} |
|
|
|
static int do_loglevel(const std::vector<std::string>& args) { |
|
// TODO: support names instead/as well? |
|
int log_level = -1; |
|
android::base::ParseInt(args[1], &log_level); |
|
android::base::LogSeverity severity; |
|
switch (log_level) { |
|
case 7: severity = android::base::DEBUG; break; |
|
case 6: severity = android::base::INFO; break; |
|
case 5: |
|
case 4: severity = android::base::WARNING; break; |
|
case 3: severity = android::base::ERROR; break; |
|
case 2: |
|
case 1: |
|
case 0: severity = android::base::FATAL; break; |
|
default: |
|
LOG(ERROR) << "loglevel: invalid log level " << log_level; |
|
return -EINVAL; |
|
} |
|
android::base::SetMinimumLogSeverity(severity); |
|
return 0; |
|
} |
|
|
|
static int do_load_persist_props(const std::vector<std::string>& args) { |
|
load_persist_props(); |
|
return 0; |
|
} |
|
|
|
static int do_load_system_props(const std::vector<std::string>& args) { |
|
load_system_props(); |
|
return 0; |
|
} |
|
|
|
static int do_wait(const std::vector<std::string>& args) { |
|
if (args.size() == 2) { |
|
return wait_for_file(args[1].c_str(), kCommandRetryTimeout); |
|
} else if (args.size() == 3) { |
|
int timeout; |
|
if (android::base::ParseInt(args[2], &timeout)) { |
|
return wait_for_file(args[1].c_str(), std::chrono::seconds(timeout)); |
|
} |
|
} |
|
return -1; |
|
} |
|
|
|
static int do_wait_for_prop(const std::vector<std::string>& args) { |
|
const char* name = args[1].c_str(); |
|
const char* value = args[2].c_str(); |
|
size_t value_len = strlen(value); |
|
|
|
if (!is_legal_property_name(name)) { |
|
LOG(ERROR) << "do_wait_for_prop(\"" << name << "\", \"" << value |
|
<< "\") failed: bad name"; |
|
return -1; |
|
} |
|
if (value_len >= PROP_VALUE_MAX) { |
|
LOG(ERROR) << "do_wait_for_prop(\"" << name << "\", \"" << value |
|
<< "\") failed: value too long"; |
|
return -1; |
|
} |
|
if (!start_waiting_for_property(name, value)) { |
|
LOG(ERROR) << "do_wait_for_prop(\"" << name << "\", \"" << value |
|
<< "\") failed: init already in waiting"; |
|
return -1; |
|
} |
|
return 0; |
|
} |
|
|
|
/* |
|
* Callback to make a directory from the ext4 code |
|
*/ |
|
static int do_installkeys_ensure_dir_exists(const char* dir) { |
|
if (make_dir(dir, 0700, sehandle) && errno != EEXIST) { |
|
return -1; |
|
} |
|
|
|
return 0; |
|
} |
|
|
|
static bool is_file_crypto() { |
|
return android::base::GetProperty("ro.crypto.type", "") == "file"; |
|
} |
|
|
|
static int do_installkey(const std::vector<std::string>& args) { |
|
if (!is_file_crypto()) { |
|
return 0; |
|
} |
|
auto unencrypted_dir = args[1] + e4crypt_unencrypted_folder; |
|
if (do_installkeys_ensure_dir_exists(unencrypted_dir.c_str())) { |
|
PLOG(ERROR) << "Failed to create " << unencrypted_dir; |
|
return -1; |
|
} |
|
std::vector<std::string> exec_args = {"exec", "/system/bin/vdc", "--wait", "cryptfs", |
|
"enablefilecrypto"}; |
|
return do_exec(exec_args); |
|
} |
|
|
|
static int do_init_user0(const std::vector<std::string>& args) { |
|
std::vector<std::string> exec_args = {"exec", "/system/bin/vdc", "--wait", "cryptfs", |
|
"init_user0"}; |
|
return do_exec(exec_args); |
|
} |
|
|
|
const BuiltinFunctionMap::Map& BuiltinFunctionMap::map() const { |
|
constexpr std::size_t kMax = std::numeric_limits<std::size_t>::max(); |
|
// clang-format off |
|
static const Map builtin_functions = { |
|
{"bootchart", {1, 1, do_bootchart}}, |
|
{"chmod", {2, 2, do_chmod}}, |
|
{"chown", {2, 3, do_chown}}, |
|
{"class_reset", {1, 1, do_class_reset}}, |
|
{"class_restart", {1, 1, do_class_restart}}, |
|
{"class_start", {1, 1, do_class_start}}, |
|
{"class_stop", {1, 1, do_class_stop}}, |
|
{"copy", {2, 2, do_copy}}, |
|
{"domainname", {1, 1, do_domainname}}, |
|
{"enable", {1, 1, do_enable}}, |
|
{"exec", {1, kMax, do_exec}}, |
|
{"exec_start", {1, 1, do_exec_start}}, |
|
{"export", {2, 2, do_export}}, |
|
{"hostname", {1, 1, do_hostname}}, |
|
{"ifup", {1, 1, do_ifup}}, |
|
{"init_user0", {0, 0, do_init_user0}}, |
|
{"insmod", {1, kMax, do_insmod}}, |
|
{"installkey", {1, 1, do_installkey}}, |
|
{"load_persist_props", {0, 0, do_load_persist_props}}, |
|
{"load_system_props", {0, 0, do_load_system_props}}, |
|
{"loglevel", {1, 1, do_loglevel}}, |
|
{"mkdir", {1, 4, do_mkdir}}, |
|
{"mount_all", {1, kMax, do_mount_all}}, |
|
{"mount", {3, kMax, do_mount}}, |
|
{"umount", {1, 1, do_umount}}, |
|
{"restart", {1, 1, do_restart}}, |
|
{"restorecon", {1, kMax, do_restorecon}}, |
|
{"restorecon_recursive", {1, kMax, do_restorecon_recursive}}, |
|
{"rm", {1, 1, do_rm}}, |
|
{"rmdir", {1, 1, do_rmdir}}, |
|
{"setprop", {2, 2, do_setprop}}, |
|
{"setrlimit", {3, 3, do_setrlimit}}, |
|
{"start", {1, 1, do_start}}, |
|
{"stop", {1, 1, do_stop}}, |
|
{"swapon_all", {1, 1, do_swapon_all}}, |
|
{"symlink", {2, 2, do_symlink}}, |
|
{"sysclktz", {1, 1, do_sysclktz}}, |
|
{"trigger", {1, 1, do_trigger}}, |
|
{"verity_load_state", {0, 0, do_verity_load_state}}, |
|
{"verity_update_state", {0, 0, do_verity_update_state}}, |
|
{"wait", {1, 2, do_wait}}, |
|
{"wait_for_prop", {2, 2, do_wait_for_prop}}, |
|
{"write", {2, 2, do_write}}, |
|
}; |
|
// clang-format on |
|
return builtin_functions; |
|
} |
|
|
|
} // namespace init |
|
} // namespace android
|
|
|